1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "3COM-NBX" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-08-09
version "0.1"
description "3COM NBX phone system. The NBX NetSet utility is a web interface in which you configure and manage the NBX system. NBX systems present the NBX NetSet utility through an embedded web server that is integrated in system software. - Homepage: http://inpath.com/products/3com-nbx.html"
# More Info #
# http://www.nbxnetset.com/
# ShodanHQ results as at 2011-08-09 #
# 827 for Virata-EmWeb Alternates
# 823 for Virata-EmWeb Alternates TCN
# Google results as at 2011-08-09 #
# 7 for intitle:"NBX NetSet" +Version +Created
# Dorks #
dorks [
'intitle:"NBX NetSet" "Version" "Created"'
]
# Examples #
examples %w|
68.111.105.58
69.36.11.66
66.135.3.20
75.77.47.244
24.149.202.215
66.208.6.190
12.197.87.100
66.182.5.45
98.189.160.22
telephone.michiganaerospace.com
rrcs-76-79-236-246.west.biz.rr.com
|
# Matches #
matches [
# Title
{ :text=>'<head><title>NBX NetSet</title>' },
{ :text=>'<HEAD><TITLE>NBX NetSet</TITLE>' },
# HTML Comment
{ :text=>'<!-- (c) Copyright, 3Com Corporation or its subsidiaries, 2004. All Rights Reserved. -->' },
{ :text=>'<!-- Gregory Brucato 4/22/98 NBX Corporation -->' },
# Version Detection # META HTTP-EQUIV="sysObjectID"
{ :version=>/<META HTTP-EQUIV="sysObjectID" CONTENT="([\d\.]{20,30})">/ },
# span class="splashTitleIPTelephony"
{ :text=>'<span class="splashTitleIPTelephony"> 3Com<SUP><span class="splashTitleNBXReg">®</span></SUP> IP Telephony Solution</span>' },
# Firmware Version Detection
{ :firmware=>/<td colspan="3" class="splashVersionCol" valign='bottom'>[\s]+Version: ([^<]+)<br \/>[\s]+Created: / },
{ :firmware=>/<TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0"><TR><TD ALIGN="right" WIDTH="130" HEIGHT="75">[\s]+Version:( )?([^<]+)<BR>/, :offset=>1 },
# Model Detection
{ :model=>/<span class="splashTitleNBX">NBX<SUP><span class="splashTitleNBXReg">®<\/span><\/SUP><\/span>[\s]+<span class="splashTitlePlatform">( )?([^<]+)<\/span>/, :offset=>1 },
]
# Passive #
def passive
m=[]
# HTTP Headers
if @headers["server"] =~ /^Virata-EmWeb\/R6_0_3$/ and !@headers["alternates"].nil? and !@headers["tcn"].nil?
m << { :name=>"HTTP Headers" }
end
# Return passive matches
m
end
end
|
